This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/eqV3GTY4UQqKiFabdVvMYA5oYtA.roa File: eqV3GTY4UQqKiFabdVvMYA5oYtA.roa (raw, json) Hash identifier: kg4Q5H/PqS48FO0J7ELsB5Yo3x0EbH0upKc8NNhgkL4= Subject key identifier: 7A:A5:77:19:36:38:51:0A:8A:88:56:9B:75:5B:CC:60:0E:68:62:D0 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8BE38A1E392FDB3A9AC2CE293BDD1 Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/eqV3GTY4UQqKiFabdVvMYA5oYtA.roa Signing time: Thu 01 Jan 2026 18:18:54 +0000 ROA not before: Thu 01 Jan 2026 18:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12443 IP address blocks: 213.175.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:be:38:a1:e3:92:fd:b3:a9:ac:2c:e2:93:bd:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7aa577193638510a8a88569b755bcc600e6862d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ce:e4:24:51:66:5a:1d:c6:5b:18:c3:d1:59: e8:8e:18:0a:6c:52:36:d1:78:8e:76:33:e2:dc:f3: 43:f9:2f:92:a1:74:49:9d:12:74:4e:10:6c:46:24: c9:8a:87:8e:c6:ea:54:0c:fa:3d:62:16:4f:cd:48: 18:8d:e5:5a:53:ec:64:7c:de:94:32:50:f0:44:fa: 67:b5:0d:ff:77:fb:b9:05:14:a1:b3:0e:f1:dc:c0: 5b:b8:8f:77:59:1c:91:3a:bb:5b:9b:71:8b:2d:63: f8:e6:26:2b:fe:d2:fa:bd:f7:5c:c7:67:bc:b2:1b: d9:75:47:d4:60:62:09:29:b7:4f:c7:10:95:7c:1a: 4c:4b:36:07:83:ab:5a:2b:ed:e8:f3:93:41:73:a4: 42:2d:c1:bd:56:4d:f7:94:24:64:3c:5b:d7:4e:94: 4d:3a:4c:52:33:9b:5c:e7:ac:f4:75:ea:03:2f:b5: 91:2e:04:1c:d0:ab:eb:b2:65:5e:82:9f:20:e0:a9: d6:59:a2:c4:bb:1b:8b:b5:bb:20:0e:d8:63:22:95: 38:63:0b:9b:ef:66:14:bb:20:21:57:14:3e:e0:44: 24:93:0a:20:e0:53:27:1c:1c:44:99:af:78:68:09: 20:d0:d3:ba:29:c1:8b:00:c3:f8:be:50:5b:93:f8: d8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A5:77:19:36:38:51:0A:8A:88:56:9B:75:5B:CC:60:0E:68:62:D0 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/eqV3GTY4UQqKiFabdVvMYA5oYtA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.175.124.0/22 Signature Algorithm: sha256WithRSAEncryption 88:33:34:c9:cc:55:dc:77:51:d7:f2:c1:e2:59:8c:0a:c5:eb: 49:8b:48:90:c9:52:e0:f7:00:a5:bb:ab:71:bb:22:a1:ad:15: 1f:b8:04:10:d5:df:9f:d3:8e:6c:36:5a:16:a0:f9:40:50:9e: d8:3a:22:4a:49:dc:8f:cc:d8:08:2e:dd:25:c2:ea:1a:07:72: 10:7d:17:85:f6:e4:da:79:1a:ac:b1:0a:bc:10:8c:3b:de:fc: 99:3b:bf:e0:35:ec:42:de:e4:ed:21:93:40:e0:6e:15:44:b0: 84:c2:21:d1:8b:1b:f6:e7:d4:ba:4b:d0:69:42:2b:34:16:c2: 84:66:1a:b7:e5:d0:74:95:3e:a2:34:fe:de:0d:42:97:07:e4: b3:23:28:d4:b1:11:a5:70:73:3d:b4:82:72:b9:69:ba:22:37: 42:9a:2c:46:56:f7:18:67:42:15:09:c6:95:7a:82:0b:88:31: 6c:9c:ad:e3:1e:5d:fc:b2:a6:ac:2b:d7:c7:60:86:ee:87:14: dd:84:52:3a:37:2e:0a:a6:92:d6:82:b3:14:65:00:63:9d:b7: d0:4c:1a:b9:4c:f5:4c:f1:48:32:e9:c8:d1:1e:be:c7:05:29: 45:0b:1c:c5:d1:a3:64:29:9e:7b:60:25:19:ee:37:cf:64:bd: 6a:1a:e5:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yL44oeOS/bOprCzik73RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWE1NzcxOTM2Mzg1MTBhOGE4ODU2OWI3NTViY2M2MDBlNjg2MmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM7kJFFmWh3GWxjD0VnojhgKbFI2 0XiOdjPi3PND+S+SoXRJnRJ0ThBsRiTJioeOxupUDPo9YhZPzUgYjeVaU+xkfN6U MlDwRPpntQ3/d/u5BRShsw7x3MBbuI93WRyROrtbm3GLLWP45iYr/tL6vfdcx2e8 shvZdUfUYGIJKbdPxxCVfBpMSzYHg6taK+3o85NBc6RCLcG9Vk33lCRkPFvXTpRN OkxSM5tc56z0deoDL7WRLgQc0KvrsmVegp8g4KnWWaLEuxuLtbsgDthjIpU4Ywub 72YUuyAhVxQ+4EQkkwog4FMnHBxEma94aAkg0NO6KcGLAMP4vlBbk/jY/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHqldxk2OFEKiohWm3VbzGAOaGLQMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvZXFWM0dUWTRVUXFLaUZhYmRWdk1ZQTVvWXRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1a98MA0G CSqGSIb3DQEBCwUAA4IBAQCIMzTJzFXcd1HX8sHiWYwKxetJi0iQyVLg9wClu6tx uyKhrRUfuAQQ1d+f045sNloWoPlAUJ7YOiJKSdyPzNgILt0lwuoaB3IQfReF9uTa eRqssQq8EIw73vyZO7/gNexC3uTtIZNA4G4VRLCEwiHRixv259S6S9BpQis0FsKE Zhq35dB0lT6iNP7eDUKXB+SzIyjUsRGlcHM9tIJyuWm6IjdCmixGVvcYZ0IVCcaV eoILiDFsnK3jHl38sqasK9fHYIbuhxTdhFI6Ny4KppLWgrMUZQBjnbfQTBq5TPVM 8Ugy6cjRHr7HBSlFCxzF0aNkKZ57YCUZ7jfPZL1qGuXU -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:53 2026 by rpki-client